mirror of
https://github.com/MariaDB/server.git
synced 2025-07-30 16:24:05 +03:00
Fix bug #15268 Unchecked null value caused server crash
cmp_item_sort_string::cmp() wasn't checking values_res variable for null. Later called function was dereferenced it and crashed server. Added null check to cmp_item_sort_string::cmp().
This commit is contained in:
@ -3337,3 +3337,11 @@ id select_type table type possible_keys key key_len ref rows Extra
|
||||
1 SIMPLE t2 const PRIMARY PRIMARY 4 const 1 Using index
|
||||
1 SIMPLE t3 const PRIMARY PRIMARY 8 const,const 1
|
||||
DROP TABLE t1,t2,t3;
|
||||
create table t1(f1 char, f2 char not null);
|
||||
insert into t1 values(null,'a');
|
||||
create table t2 (f2 char not null);
|
||||
insert into t2 values('b');
|
||||
select * from t1 left join t2 on f1=t2.f2 where t1.f2='a';
|
||||
f1 f2 f2
|
||||
NULL a NULL
|
||||
drop table t1,t2;
|
||||
|
@ -2805,3 +2805,13 @@ EXPLAIN SELECT t2.key_a,foo
|
||||
WHERE t2.key_a=2 and key_b=5;
|
||||
|
||||
DROP TABLE t1,t2,t3;
|
||||
|
||||
#
|
||||
# Bug#15268 Unchecked null value caused server crash
|
||||
#
|
||||
create table t1(f1 char, f2 char not null);
|
||||
insert into t1 values(null,'a');
|
||||
create table t2 (f2 char not null);
|
||||
insert into t2 values('b');
|
||||
select * from t1 left join t2 on f1=t2.f2 where t1.f2='a';
|
||||
drop table t1,t2;
|
||||
|
Reference in New Issue
Block a user